Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/81C7EE088DF111EEBAF5601BC4F9AE02.roa
File: 81C7EE088DF111EEBAF5601BC4F9AE02.roa (raw, json)
Hash identifier: CRI92XbMS3q/rRPmQg3wO3RSp8ZmrhL7Jbxpo/V0XVM=
Subject key identifier: 98:3A:39:6B:9F:E1:6C:E6:3F:5B:43:33:15:BF:DE:82:EB:E0:AA:AA
Certificate issuer: /CN=A91A3AB3/serialNumber=E4A94CFA8D2F9F5B39EF46350591CE312E514FB3
Certificate serial: 01AC
Authority key identifier: E4:A9:4C:FA:8D:2F:9F:5B:39:EF:46:35:05:91:CE:31:2E:51:4F:B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/81C7EE088DF111EEBAF5601BC4F9AE02.roa
Signing time: Fri 03 May 2024 05:17:40 +0000
ROA not before: Fri 03 May 2024 05:17:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 149766
IP address blocks: 103.185.146.0/23 maxlen: 23
103.185.146.0/24 maxlen: 24
103.185.147.0/24 maxlen: 24
2001:df0:9840::/48 maxlen: 48
2401:93e0::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 11 Jul 2024 10:48:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 428 (0x1ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3AB3/serialNumber=E4A94CFA8D2F9F5B39EF46350591CE312E514FB3
Validity
Not Before: May 3 05:17:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66347373-cfc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:dc:b5:0a:1d:e7:67:ad:da:d1:84:c1:e8:c5:
3d:65:72:49:cc:e6:31:3e:0f:a4:2f:7f:24:58:98:
2e:d8:91:e0:8b:be:e7:bc:77:96:40:03:86:03:e3:
53:da:72:aa:fd:ff:4b:41:1b:e4:c4:a4:bd:90:60:
2e:f4:ef:0c:0e:31:e3:34:7e:83:ca:36:ba:92:46:
0c:e6:3c:54:65:b5:36:7c:60:c1:5d:8b:18:24:ba:
9a:4c:12:26:00:d0:3c:f0:8b:4e:1d:51:19:72:82:
fc:7e:41:da:fe:58:32:9f:27:34:5b:00:8c:e8:9c:
c8:53:63:14:69:f5:3b:1b:c6:19:9e:8d:1a:bb:77:
6b:44:b1:07:7f:cf:2b:39:74:5b:9f:e3:df:18:dd:
ad:9f:e3:a8:23:62:7c:68:4e:f0:9b:ee:a3:a9:15:
a4:12:dc:e8:68:9b:f2:5f:03:43:e3:74:a2:a4:da:
03:1f:f6:ec:0b:ca:a7:5f:e8:3d:a4:65:36:2f:1a:
ca:55:2f:f2:92:0f:1d:0d:57:b0:9a:3a:9e:1f:e9:
52:3a:83:ab:08:d9:1e:f4:73:d8:41:9e:6a:5e:22:
47:72:a2:fc:e0:4a:96:35:dd:20:9e:ca:0c:fe:99:
47:6c:0d:73:c4:a4:f3:69:67:d5:e6:43:9f:ba:97:
f2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:3A:39:6B:9F:E1:6C:E6:3F:5B:43:33:15:BF:DE:82:EB:E0:AA:AA
X509v3 Authority Key Identifier:
keyid:E4:A9:4C:FA:8D:2F:9F:5B:39:EF:46:35:05:91:CE:31:2E:51:4F:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/81C7EE088DF111EEBAF5601BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.185.146.0/23
IPv6:
2001:df0:9840::/48
2401:93e0::/32
Signature Algorithm: sha256WithRSAEncryption
78:e9:f6:b7:19:0e:e7:04:99:27:bc:f2:08:1a:c4:98:68:fc:
bb:de:4d:b8:6c:00:10:88:9f:15:37:76:97:24:01:ed:33:50:
90:95:90:53:cc:65:05:30:38:6f:3d:54:87:4c:82:52:d8:37:
63:e0:58:61:9e:0e:e6:70:48:a9:e1:2c:ce:34:ee:d6:c0:f9:
f7:04:f1:92:e0:e2:ec:f9:d8:9e:42:f9:45:f6:10:a0:a4:d8:
bd:53:50:9c:d5:91:6f:1d:93:6a:69:9c:19:72:a1:24:c4:d9:
44:24:37:06:28:ed:6b:8e:43:ac:db:44:9d:95:18:39:3f:28:
f1:4a:f7:c4:2b:f6:3a:0b:f0:a6:47:2a:78:c6:36:6a:89:85:
b6:87:ff:8f:64:79:57:11:09:a4:b3:c9:38:90:15:7e:41:77:
0d:13:99:91:e5:20:cf:df:ee:d6:7b:2e:73:ac:c0:29:31:8b:
55:d0:80:18:d7:1b:ab:ba:23:0e:c4:f5:03:cd:8f:80:d9:3d:
0b:81:87:6d:ab:64:b1:92:2c:78:c9:d3:a6:8d:69:f2:4e:7a:
15:cf:36:ee:63:c1:4f:46:14:90:54:0b:30:fb:a0:1e:54:c7:
94:a8:2d:25:23:a0:50:89:a1:b5:18:4c:d1:7c:57:c1:93:d8:
b0:fb:50:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 11 12:24:01 2024 by rpki-client on console-ams.rpki-client.org